@stacksjs/desktop-build 0.73.1 → 0.73.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.d.ts +31 -0
- package/dist/index.js +3 -3
- package/package.json +3 -3
package/dist/index.d.ts
CHANGED
|
@@ -50,6 +50,25 @@ export declare function resolveDevWindowUrl(port: number, options?: OpenDevWindo
|
|
|
50
50
|
export declare function craftDevCommand(port: number, options?: OpenDevWindowOptions): string[];
|
|
51
51
|
export declare function createUpdateManifestUrl(baseUrl: string, channel?: string): string;
|
|
52
52
|
export declare function openDevWindow(port: number, options?: OpenDevWindowOptions, launcher?: CraftLauncher): Promise<boolean>;
|
|
53
|
+
/**
|
|
54
|
+
* Whether a file is a Bun standalone executable.
|
|
55
|
+
*
|
|
56
|
+
* Size first because it is a `stat`, then the marker, so the expensive check
|
|
57
|
+
* only runs on the handful of files large enough to be a runtime at all.
|
|
58
|
+
*/
|
|
59
|
+
export declare function looksLikeBunExecutable(path: string, read?: (path: string) => { size: number, tail: string } | null): boolean;
|
|
60
|
+
/**
|
|
61
|
+
* What a bundle is paying to ship more than one Bun-compiled executable.
|
|
62
|
+
*
|
|
63
|
+
* Every one of them embeds a complete copy of the Bun runtime. An app that
|
|
64
|
+
* splits its launcher, its server and a worker into three binaries ships three
|
|
65
|
+
* copies — about 180 MB — and nothing says so: the bundle is simply large, and
|
|
66
|
+
* a large desktop app looks normal.
|
|
67
|
+
*
|
|
68
|
+
* Returns null when there is at most one, which is the case worth saying
|
|
69
|
+
* nothing about.
|
|
70
|
+
*/
|
|
71
|
+
export declare function describeRuntimeDuplication(runtimes: BundledRuntime[]): string | null;
|
|
53
72
|
/** Where an application puts a launcher of its own. */
|
|
54
73
|
export declare const USERLAND_LAUNCHER: 'app/Desktop/launcher.ts';
|
|
55
74
|
/**
|
|
@@ -60,6 +79,13 @@ export declare const USERLAND_LAUNCHER: 'app/Desktop/launcher.ts';
|
|
|
60
79
|
* launch, long after the build said it succeeded.
|
|
61
80
|
*/
|
|
62
81
|
export declare const RESERVED_PLIST_KEYS: ReadonlySet<string>;
|
|
82
|
+
/**
|
|
83
|
+
* The trailer `bun build --compile` writes into every standalone executable.
|
|
84
|
+
*
|
|
85
|
+
* Present in a Bun single-file binary and absent from a native one, which is
|
|
86
|
+
* what makes it usable to tell the two apart inside a finished bundle.
|
|
87
|
+
*/
|
|
88
|
+
export declare const BUN_EXECUTABLE_MARKER: '---- Bun!';
|
|
63
89
|
export declare interface Desktop {
|
|
64
90
|
app: unknown
|
|
65
91
|
core: unknown
|
|
@@ -110,6 +136,11 @@ export declare interface OpenDevWindowOptions {
|
|
|
110
136
|
hideDockIcon?: boolean
|
|
111
137
|
menubarOnly?: boolean
|
|
112
138
|
}
|
|
139
|
+
/** One Bun-compiled executable found in a bundle. */
|
|
140
|
+
export declare interface BundledRuntime {
|
|
141
|
+
name: string
|
|
142
|
+
bytes: number
|
|
143
|
+
}
|
|
113
144
|
export type CraftLauncher = (command: string[]) => void | Promise<void>;
|
|
114
145
|
export type CraftBinaryLocator = (binary: string) => string | null;
|
|
115
146
|
export * from './invites';
|
package/dist/index.js
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
// @bun
|
|
2
|
-
import{existsSync as p}from"fs";import{dirname as
|
|
2
|
+
import{closeSync as P,existsSync as p,openSync as M,readSync as F,statSync as O}from"fs";import{dirname as T,join as a}from"path";import o from"process";import{fileURLToPath as z}from"url";import{craftBinaryNotFoundMessage as N,resolveCraftBinary as K}from"craft-native";function v(e,t,r={}){if(!t.trim())throw Error("Invite token is required");let n=new URL("/invite",/^https?:\/\//.test(e)?e:`https://${e}`);if(n.searchParams.set("token",t),r.email)n.searchParams.set("email",r.email);if(r.team)n.searchParams.set("team",r.team);if(r.role)n.searchParams.set("role",r.role);if(r.expiresAt){let s=r.expiresAt instanceof Date?r.expiresAt:new Date(r.expiresAt);if(Number.isNaN(s.valueOf()))throw Error("Invite expiration must be a valid date");n.searchParams.set("expires",s.toISOString())}return n.toString()}async function G(e,t){return Promise.all(e.map(async(r)=>{let n=typeof r==="string"?{email:r}:r;try{x(n.email);let s=await t.createToken(n),i=v(t.baseUrl,s,{email:n.email,team:n.team,role:n.role,expiresAt:t.expiresAt});return await t.send({recipient:n,url:i}),{recipient:n,url:i,delivered:!0}}catch(s){return{recipient:n,url:"",delivered:!1,error:s instanceof Error?s.message:String(s)}}}))}function x(e){if(!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(e))throw Error(`Invalid invite email: ${e}`)}import{createHash as D,createPublicKey as E,verify as R}from"crypto";import{mkdir as I,rename as S,writeFile as U}from"fs/promises";import{dirname as A}from"path";async function ee(e){k(e.manifestUrl);let t=await(e.fetcher||fetch)(e.manifestUrl,{headers:{Accept:"application/json"}});if(!t.ok)throw Error(`Desktop update check failed with HTTP ${t.status}`);let r=h(await t.json());return m(r,e.trustedKeys),B(r.version,e.currentVersion)>0?r:null}async function te(e,t,r=fetch,n){if(h(e),!n)throw Error("Desktop update staging requires trusted signing keys");m(e,n),k(e.url);let s=await r(e.url);if(!s.ok)throw Error(`Desktop update download failed with HTTP ${s.status}`);let i=new Uint8Array(await s.arrayBuffer());if(i.byteLength!==e.size)throw Error(`Desktop update size mismatch: expected ${e.size}, received ${i.byteLength}`);if(D("sha256").update(i).digest("hex")!==e.sha256.toLowerCase())throw Error("Desktop update checksum mismatch");await I(A(t),{recursive:!0});let f=`${t}.download-${crypto.randomUUID()}`;return await U(f,i,{mode:448}),await S(f,t),{manifest:e,path:t,bytes:i.byteLength}}function B(e,t){let r=c(e),n=c(t);for(let s=0;s<3;s++){let i=r[s]-n[s];if(i!==0)return Math.sign(i)}return 0}function h(e){if(!e||typeof e!=="object")throw Error("Desktop update manifest must be an object");let t=e;if(c(t.version||""),typeof t.url!=="string")throw Error("Desktop update manifest requires a URL");if(typeof t.sha256!=="string"||!/^[a-f0-9]{64}$/i.test(t.sha256))throw Error("Desktop update manifest requires a SHA-256 checksum");if(!Number.isInteger(t.size)||t.size<0)throw Error("Desktop update manifest requires a non-negative integer size");if(typeof t.sourceRevision!=="string"||!/^[0-9a-f]{40}$/.test(t.sourceRevision))throw Error("Desktop update manifest requires a full source revision");if(typeof t.platform!=="string"||!["darwin","linux","win32"].includes(t.platform))throw Error("Desktop update manifest requires a supported platform identifier");if(typeof t.architecture!=="string"||!/^[a-z0-9_-]+$/.test(t.architecture))throw Error("Desktop update manifest requires an architecture");if(typeof t.signingKeyId!=="string"||!/^[a-zA-Z0-9._-]+$/.test(t.signingKeyId))throw Error("Desktop update manifest requires a signing key ID");if(typeof t.signature!=="string"||!/^[A-Za-z0-9_-]+$/.test(t.signature))throw Error("Desktop update manifest requires an Ed25519 signature");return t}function j(e){return Buffer.from(JSON.stringify({version:e.version,url:e.url,sha256:e.sha256.toLowerCase(),size:e.size,sourceRevision:e.sourceRevision,platform:e.platform,architecture:e.architecture,signingKeyId:e.signingKeyId,publishedAt:e.publishedAt||null,notes:e.notes||null}),"utf8")}function m(e,t){let r=t[e.signingKeyId];if(!r)throw Error(`Desktop update signing key is not trusted: ${e.signingKeyId}`);let n="ed25519-public:";if(!r.startsWith(n))throw Error("Desktop update signing key has an invalid encoding");try{let s=E({key:Buffer.from(r.slice(n.length),"base64url"),format:"der",type:"spki"}),i=Buffer.from(e.signature,"base64url");if(s.asymmetricKeyType!=="ed25519"||i.length!==64||!R(null,j(e),s,i))throw Error("invalid")}catch{throw Error("Desktop update manifest signature verification failed")}}function c(e){let t=e.match(/^v?(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?$/);if(!t)throw Error(`Invalid semantic version: ${e}`);return[Number(t[1]),Number(t[2]),Number(t[3])]}function k(e){let t=new URL(e),r=["localhost","127.0.0.1","::1"].includes(t.hostname);if(t.protocol!=="https:"&&!(t.protocol==="http:"&&r))throw Error("Desktop updates require HTTPS outside loopback development")}var L=[{platform:"darwin",architecture:"arm64",status:"experimental",osVersions:["macOS 15 runner"],packageFormat:"DMG + PKG",signing:"pending",notarization:"pending",installLaunchEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",updateRollbackEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",packagingEvidence:"https://github.com/stacksjs/protocol/blob/main/evidence/craft.json",blockingIssues:["https://github.com/stacksjs/stacks/issues/2062","https://github.com/home-lang/craft/issues/11"],limitations:["Lifecycle fixtures are unsigned while platform identities remain unprovisioned.","Craft v0.0.48 is source-tagged, but its upstream release workflow is blocked by repository Actions policy."]},{platform:"darwin",architecture:"x64",status:"experimental",osVersions:["macOS 15 Intel runner"],packageFormat:"DMG + PKG",signing:"pending",notarization:"pending",installLaunchEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",updateRollbackEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",packagingEvidence:"https://github.com/stacksjs/protocol/blob/main/evidence/craft.json",blockingIssues:["https://github.com/stacksjs/stacks/issues/2062","https://github.com/home-lang/craft/issues/11"],limitations:["Lifecycle fixtures are unsigned while platform identities remain unprovisioned.","Craft v0.0.48 is source-tagged, but its upstream release workflow is blocked by repository Actions policy."]},{platform:"linux",architecture:"x64",status:"experimental",osVersions:["Ubuntu 24.04 runner"],packageFormat:"DEB",signing:"pending",notarization:"not-applicable",installLaunchEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",updateRollbackEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",packagingEvidence:"https://github.com/stacksjs/protocol/blob/main/evidence/craft.json",blockingIssues:["https://github.com/stacksjs/stacks/issues/2062","https://github.com/home-lang/craft/issues/11"],limitations:["The lifecycle fixture is unsigned and no package repository support policy is published.","Craft v0.0.48 is source-tagged, but its upstream release workflow is blocked by repository Actions policy."]},{platform:"win32",architecture:"x64",status:"experimental",osVersions:["Windows Server 2025 runner"],packageFormat:"MSI + ZIP",signing:"pending",notarization:"not-applicable",installLaunchEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",updateRollbackEvidence:"https://github.com/stacksjs/stacks/actions/runs/29890804159",packagingEvidence:"https://github.com/stacksjs/protocol/blob/main/evidence/craft.json",blockingIssues:["https://github.com/stacksjs/stacks/issues/2062","https://github.com/home-lang/craft/issues/11"],limitations:["The lifecycle fixture is not Authenticode-signed.","Craft v0.0.48 is source-tagged, but its upstream release workflow is blocked by repository Actions policy."]}];function C(e=process.platform,t=process.arch){return L.find((r)=>r.platform===e&&r.architecture===t)}function ne(e,t=process.platform,r=process.arch){let n=C(t,r);if(!n)throw Error(`Desktop target ${t}/${r} is unsupported`);if(e==="stable"&&(n.status!=="stable"||n.signing!=="enforced"||n.platform==="darwin"&&n.notarization!=="enforced"||!n.installLaunchEvidence||!n.updateRollbackEvidence))throw Error(`Desktop target ${t}/${r} cannot be released as stable; complete stacksjs/stacks#2059, #2062, and #2063 first`);return n}function w(e=o.env.CRAFT_BIN){return K(e)}function ue(e=o.env.CRAFT_BIN,t=(r)=>Bun.which(r)){let r=w(e);if(r!=="craft")return r;let n=t(r);if(!n)throw Error(N(r));return n}var y="app/Desktop/launcher.ts";function le(e=o.cwd()){return p(a(e,y))}function de(e=o.cwd()){let t=a(e,y);if(p(t))return t;let r=T(z(import.meta.url)),s=[a(r,"launcher.ts"),a(r,"launcher.js")].find((i)=>p(i));if(!s)throw Error("Desktop launcher entrypoint not found. Reinstall @stacksjs/desktop - the package must ship dist/launcher.js.");return s}var b=new Set(["CFBundleName","CFBundleDisplayName","CFBundleIdentifier","CFBundleVersion","CFBundleShortVersionString","CFBundleExecutable","CFBundlePackageType","CFBundleInfoDictionaryVersion","CFBundleIconFile"]);function u(e){return e.replaceAll("&","&").replaceAll("<","<").replaceAll(">",">").replaceAll('"',""").replaceAll("'","'")}function l(e,t=""){if(typeof e==="string")return`<string>${u(e)}</string>`;if(typeof e==="boolean")return e?"<true/>":"<false/>";if(typeof e==="number"){if(!Number.isFinite(e))throw Error(`Unsupported Info.plist number: ${e}`);return Number.isInteger(e)?`<integer>${e}</integer>`:`<real>${e}</real>`}if(Array.isArray(e)){if(e.length===0)return"<array/>";return`<array>
|
|
3
3
|
${e.map((n)=>`${t} ${l(n,`${t} `)}`).join(`
|
|
4
4
|
`)}
|
|
5
5
|
${t}</array>`}if(e&&typeof e==="object"){let r=Object.entries(e);if(r.length===0)return"<dict/>";return`<dict>
|
|
6
6
|
${r.map(([s,i])=>`${t} <key>${u(s)}</key>${l(i,`${t} `)}`).join(`
|
|
7
7
|
`)}
|
|
8
|
-
${t}</dict>`}throw Error(`Unsupported Info.plist value: ${JSON.stringify(e)??String(e)}`)}function
|
|
8
|
+
${t}</dict>`}throw Error(`Unsupported Info.plist value: ${JSON.stringify(e)??String(e)}`)}function ge(e){let t=Object.keys(e).filter((s)=>b.has(s)),r=Object.entries(e).filter(([s])=>!b.has(s));if(r.length===0)return{xml:"",ignored:t};return{xml:`
|
|
9
9
|
${r.map(([s,i])=>` <key>${u(s)}</key>${l(i," ")}`).join(`
|
|
10
|
-
`)}`,ignored:t}}function
|
|
10
|
+
`)}`,ignored:t}}function _(e,t={}){if(!Number.isInteger(e)||e<1||e>65535)throw RangeError(`Invalid desktop development port: ${e}`);let r=t.url||o.env.APP_URL;if(!r)return"https://stacks.test";let n=/^https?:\/\//.test(r)?r:`https://${r}`;return new URL(n).toString().replace(/\/$/,"")}function q(e,t={}){let r=[w(t.craftBin),_(e,t),"--title",t.title||"Stacks","--width",String(t.width||1400),"--height",String(t.height||900)];if(t.hotReload!==!1)r.push("--hot-reload");if(t.devTools===!1)r.push("--no-devtools");if(t.darkMode)r.push("--dark");if(t.systemTray)r.push("--system-tray");if(t.hideDockIcon)r.push("--hide-dock-icon");if(t.menubarOnly)r.push("--menubar-only");return r}function fe(e,t="stable"){if(!/^[a-z0-9-]+$/i.test(t))throw Error("Update channel may only contain letters, numbers, and hyphens");return new URL(`/desktop/updates/${t}.json`,/^https?:\/\//.test(e)?e:`https://${e}`).toString()}async function V(e){Bun.spawn(e,{stdin:"inherit",stdout:"inherit",stderr:"inherit"}).unref()}async function he(e,t={},r=V){return await r(q(e,t)),!0}var W="---- Bun!",H=8388608,d=41943040;function me(e,t=Z){let r=t(e);if(!r||r.size<d)return!1;return r.tail.includes(W)}function Z(e){try{let{size:t}=O(e);if(t<d)return{size:t,tail:""};let r=M(e,"r");try{let n=Math.min(H,t),s=Buffer.alloc(n);return F(r,s,0,n,t-n),{size:t,tail:s.toString("latin1")}}finally{P(r)}}catch{return null}}function ke(e){if(e.length<2)return null;let t=[...e].sort((i,g)=>g.bytes-i.bytes),n=t.slice(1).length*d,s=t.map((i)=>`${i.name} (${(i.bytes/1024/1024).toFixed(1)} MB)`).join(", ");return`This bundle ships ${e.length} Bun-compiled executables: ${s}. Each embeds a full copy of the Bun runtime, so at least ${(n/1024/1024).toFixed(0)} MB of the bundle is the same runtime repeated. `+"Compiling one binary that dispatches on a subcommand \u2014 `MyApp agent`, `MyApp worker` \u2014 keeps the helpers as separate processes and pays for the runtime once."}export{W as BUN_EXECUTABLE_MARKER,b as RESERVED_PLIST_KEYS,y as USERLAND_LAUNCHER,ne as assertDesktopReleaseChannel,ee as checkForDesktopUpdate,B as compareVersions,q as craftDevCommand,v as createInviteLink,fe as createUpdateManifestUrl,ke as describeRuntimeDuplication,C as desktopSupport,L as desktopSupportMatrix,le as hasUserlandDesktopLauncher,me as looksLikeBunExecutable,he as openDevWindow,l as plistValue,ge as renderUserlandPlistEntries,w as resolveCraftBinary,ue as resolveCraftExecutable,de as resolveDesktopLauncher,_ as resolveDevWindowUrl,G as sendDesktopInvites,te as stageDesktopUpdate,j as updateManifestPayload,h as validateUpdateManifest,m as verifyUpdateManifestSignature,u as xmlEscape};
|
package/package.json
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
"name": "@stacksjs/desktop-build",
|
|
3
3
|
"type": "module",
|
|
4
4
|
"sideEffects": false,
|
|
5
|
-
"version": "0.73.
|
|
5
|
+
"version": "0.73.3",
|
|
6
6
|
"description": "Build and launch Craft desktop applications for Stacks",
|
|
7
7
|
"author": "Chris Breuer",
|
|
8
8
|
"contributors": [
|
|
@@ -67,9 +67,9 @@
|
|
|
67
67
|
"prepublishOnly": "bun run build"
|
|
68
68
|
},
|
|
69
69
|
"devDependencies": {
|
|
70
|
-
"@stacksjs/build": "0.73.
|
|
70
|
+
"@stacksjs/build": "0.73.3",
|
|
71
71
|
"better-dx": "^0.2.24",
|
|
72
|
-
"@stacksjs/server": "0.73.
|
|
72
|
+
"@stacksjs/server": "0.73.3"
|
|
73
73
|
},
|
|
74
74
|
"dependencies": {
|
|
75
75
|
"craft-native": "^0.0.55"
|